gosentry

gosentry gosentry is a security-focused fork of the Go toolchain, integrating numerous features for state-of-the-art fuzzing campaigns on Go codebases. If you were using go test -fuzz before, you should use gosentry as a replacement. It comes with various fuzzing improvements and bug detectors th...

Astra Linux – vulnerability in linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: mac802154: fix data race and NULL deref on local-assocdev local-assocdev is shared between the association path and the association-response worker without common synchronization. mac802154performassociation stores the coordinato...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: do not add sk to the parent socket’s accept queue unless BTLISTEN is set. The new sk should not be added to the parent socket’s accept queue after last l2capsockcleanuplisten has been executed in...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU iterator to dump route exceptions rt6nhdumpexceptions uses hlistforeachentry to iterate over RCU-protected exception lists. The caller holds rcureadlock, but does not hold rt6exceptionlock, so rt6insertexception can...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: Audit: Fixed data races involving skbqueuelen readers on auditqueue Multiple readers access auditqueue.qlen via skbqueuelen without holding the queue lock or using READONCE; meanwhile, kauditd writes to this field via the...

kernel: dm cache policy smq: fix missing locks in invalidating cache blocks

A flaw was found in the Linux kernel's device-mapper dm cache policy, specifically within the smq module. In passthrough mode, the invalidatemapping operation lacks proper locking, allowing for concurrent access. This can lead to data races, resulting in data corruption or use-after-free issues,...

kernel: dm cache policy smq: fix missing locks in invalidating cache blocks

A flaw was found in the Linux kernel's device-mapper dm cache policy, specifically within the smq module. In passthrough mode, the invalidatemapping operation lacks proper locking, allowing for concurrent access. This can lead to data races, resulting in data corruption or use-after-free issues,...

SUSE SLED15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:5091-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5091-1 advisory. The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues: The following security...

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues: The following security issues were fixed: CVE-2025-68219: cifs: fix memory leak in smb3fscontextparseparam error path bsc1255222. CVE-2026-31708: smb: client: fix OOB read in smb2ioctlqueryinfo...

Security update for the Linux Kernel

Description: The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues: The following security issues were fixed: CVE-2025-68219: cifs: fix memory leak in smb3fscontextparseparam error path bsc1255222. CVE-2026-31708: smb: client: fix OOB read in...

SUSE-SU-2026:24550-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68219: cifs: fix memory leak in smb3fscontextparseparam error path bsc1255222. - CVE-2026-31708: smb: client: fix OOB read in smb2ioctlqueryinf...

SUSE-SU-2026:24619-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68219: cifs: fix memory leak in smb3fscontextparseparam error path bsc1255222. - CVE-2026-31708: smb: client: fix OOB read in smb2ioctlqueryinf...

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues: The following security issues were fixed: CVE-2025-68219: cifs: fix memory leak in smb3fscontextparseparam error path bsc1255222. CVE-2026-31708: smb: client: fix OOB read in smb2ioctlqueryinfo...

SUSE-SU-2026:5091-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68219: cifs: fix memory leak in smb3fscontextparseparam error path bsc1255222. - CVE-2026-31708: smb: client: fix OOB read in smb2ioctlqueryinfo QUERYINFO path...

kernel: dm cache policy smq: fix missing locks in invalidating cache blocks

A flaw was found in the Linux kernel's device-mapper dm cache policy, specifically within the smq module. In passthrough mode, the invalidatemapping operation lacks proper locking, allowing for concurrent access. This can lead to data races, resulting in data corruption or use-after-free issues,...

kernel: dm cache policy smq: fix missing locks in invalidating cache blocks

A flaw was found in the Linux kernel's device-mapper dm cache policy, specifically within the smq module. In passthrough mode, the invalidatemapping operation lacks proper locking, allowing for concurrent access. This can lead to data races, resulting in data corruption or use-after-free issues,...

Data race and double free via unsound `Send`/`Sync` in `reblessive`

dbs::Executor drives every SurrealQL statement through reblessive::tree::TreeStack. In reblessive 0.4.3 the runtime types unconditionally assert Send/Sync unsafe impl Send/Sync for Stack, TreeStack and Runner, while the public entry points accept any future without a Send bound and store it...

CVE-2026-58927

The vulnerability is a Use-After-Free UAF in the EVS AIDL HAL, arising from a data race on an unsynchronized std::weakptr within EvsEnumerator::openCamera. Specifically, concurrent calls from a privileged UID e.g., AIDAUTOMOTIVEEVS can cause a torn weakptr state, leading to a virtual call through...

CVE-2026-58927

A Use-After-Free (UAF) vulnerability exists in the EVS AIDL HAL on Google Android, caused by a data race on an unsynchronized std::weak_ptr within EvsEnumerator::openCamera(). Concurrent calls from a privileged UID (such as AID_AUTOMOTIVE_EVS) can cause a torn weak_ptr state, leading to a virtual...

CVE-2026-58927

The vulnerability is a Use-After-Free UAF in the EVS AIDL HAL, arising from a data race on an unsynchronized std::weakptr within EvsEnumerator::openCamera. Specifically, concurrent calls from a privileged UID e.g., AIDAUTOMOTIVEEVS can cause a torn weakptr state, leading to a virtual call through...